Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
File: J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft (raw, json)
Hash identifier: Lug4FY5zrtEGzRxCz5a8afw9yDfhKMepUrKglrw1yZ0=
Subject key identifier: 3F:36:44:B5:81:49:65:ED:6E:2B:86:6E:73:97:65:AB:0D:82:01:AD
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Certificate issuer: /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial: 0194BC7320E24C9C1C74410051F442D3B9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
Manifest number: 1267
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: 8mfWKUaTIk1RDd44sNUtQ4HsM2s.roa (hash: GuIpyglmMkqHqRdMJ131I6La+nXiqbtWAj+MwrMR+Yc=)
2: Ht6FsCIGKxXaA3P0oIyjphKEPpk.roa (hash: jQWJMmY8DgPGrpE2GgmGMr1+l/UtziWDhgw2WyC6x2Q=)
3: J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl (hash: sFL70SjgoVtrODBtsJS0enYCxV3x5Tg/PrnJ9lpDbHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:20:e2:4c:9c:1c:74:41:00:51:f4:42:d3:b9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=3f3644b5814965ed6e2b866e739765ab0d8201ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8f:aa:bb:11:56:c3:6a:3f:79:9e:bd:d3:56:
69:8a:e6:d5:32:8a:5b:81:46:eb:c8:c1:40:1b:09:
3a:ce:13:e7:4a:73:27:61:84:a5:fd:4c:7e:64:fa:
d4:d7:23:89:01:20:2c:44:68:fb:c5:28:7e:af:14:
1a:36:16:8d:91:5a:20:8a:86:45:1e:9a:8c:27:39:
77:fd:0f:7f:de:a5:36:d5:54:7e:dd:d6:a2:4c:ae:
9c:af:a7:20:4d:25:20:e7:72:f0:03:09:37:c4:35:
53:9e:12:15:b4:b2:4c:cd:11:b2:aa:4f:cd:78:5d:
fa:39:73:64:55:a1:87:6c:18:32:c4:da:bb:b4:f2:
de:76:2b:f1:f5:98:8c:68:22:ed:a2:9c:53:ae:bd:
12:b4:8b:9d:82:17:f1:49:1b:58:29:fc:d7:5b:cf:
f8:18:d4:fa:74:f5:e1:ce:93:a8:f0:e6:03:6f:82:
9a:d8:12:d9:8a:92:f7:65:6b:a7:22:0a:33:7c:6c:
e4:b8:8b:d2:6f:d8:e1:d4:6f:30:df:52:bf:c0:b0:
c9:4d:10:b9:df:a1:ff:14:e3:53:01:5c:af:b6:d3:
8e:e9:6a:3a:79:ff:fd:8d:e7:ec:10:be:31:25:44:
ab:7e:c3:e7:aa:22:2e:f2:d8:6a:a5:e3:7b:a2:88:
1f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:36:44:B5:81:49:65:ED:6E:2B:86:6E:73:97:65:AB:0D:82:01:AD
X509v3 Authority Key Identifier:
keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cd:a0:b4:21:eb:36:9b:3e:4c:3a:b9:64:23:05:4b:7c:26:
62:8c:43:ae:56:71:e8:4c:c7:a2:4c:89:f8:c8:2f:74:38:57:
75:99:d6:ce:74:45:c1:43:04:3a:44:0d:46:ed:e9:b8:e8:47:
c0:c2:7d:54:c2:a2:09:c1:4a:57:c2:f1:b7:f2:e7:c7:22:29:
b2:49:00:4e:d8:cc:06:5e:91:b1:e3:bb:76:a4:35:03:10:16:
9e:1d:e9:75:91:60:cd:f3:83:6e:00:44:1b:bf:6b:77:f7:ed:
31:cb:d3:00:da:3f:9a:93:c4:57:2f:20:24:4f:e6:dc:65:c4:
bf:e9:ef:ee:36:07:3b:a8:fd:65:c0:2a:e2:42:01:08:b4:6a:
75:d0:24:bf:2f:e2:4a:97:94:37:35:08:aa:71:65:4f:a3:c0:
b3:80:ca:26:63:db:ed:14:7b:3e:8f:2a:44:89:2c:62:9d:8c:
41:0a:e1:33:01:af:ce:b6:86:bc:27:a2:c4:f7:93:26:e9:a3:
bd:64:b8:b5:d2:10:5b:f4:b3:81:4b:e8:f5:69:fe:b7:88:50:
9b:74:44:7e:c8:fb:7f:73:01:7d:a4:5a:5e:ca:e2:af:ed:63:
a4:ad:02:19:ad:87:d7:bf:1c:6a:48:2e:4a:be:c2:d4:3f:80:
f6:e7:b8:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyDiTJwcdEEAUfRC07mrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzAwN2U1MDgyYjhlOGQ4Mjg5MDE4NzE4Y2ZkNTI3YTc4
OTNlNWUwHhcNMjUwMTMxMTMwMDQ5WhcNMjUwMjAxMTMwMDQ5WjAzMTEwLwYDVQQD
EygzZjM2NDRiNTgxNDk2NWVkNmUyYjg2NmU3Mzk3NjVhYjBkODIwMWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9o+quxFWw2o/eZ6901ZpiubVMopb
gUbryMFAGwk6zhPnSnMnYYSl/Ux+ZPrU1yOJASAsRGj7xSh+rxQaNhaNkVogioZF
HpqMJzl3/Q9/3qU21VR+3daiTK6cr6cgTSUg53LwAwk3xDVTnhIVtLJMzRGyqk/N
eF36OXNkVaGHbBgyxNq7tPLedivx9ZiMaCLtopxTrr0StIudghfxSRtYKfzXW8/4
GNT6dPXhzpOo8OYDb4Ka2BLZipL3ZWunIgozfGzkuIvSb9jh1G8w31K/wLDJTRC5
36H/FONTAVyvttOO6Wo6ef/9jefsEL4xJUSrfsPnqiIu8thqpeN7oogffQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD82RLWBSWXtbiuGbnOXZasNggGtMB8GA1UdIwQY
MBaAFCfAB+UIK46NgokBhxjP1SeniT5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhBSDVRZ3JqbzJDaVFHSEdNX1ZKNmVKUGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNmZlMTQtZDE0Ni00ZTY2LWE4NDEt
MmM2NGMyOTEzNTNlLzEvSjhBSDVRZ3JqbzJDaVFHSEdNX1ZKNmVKUGw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8wNmZlMTQtZDE0Ni00ZTY2LWE4NDEtMmM2NGMyOTEzNTNl
LzEvSjhBSDVRZ3JqbzJDaVFHSEdNX1ZKNmVKUGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANM2gtCHr
Nps+TDq5ZCMFS3wmYoxDrlZx6EzHokyJ+MgvdDhXdZnWznRFwUMEOkQNRu3puOhH
wMJ9VMKiCcFKV8Lxt/LnxyIpskkATtjMBl6RseO7dqQ1AxAWnh3pdZFgzfODbgBE
G79rd/ftMcvTANo/mpPEVy8gJE/m3GXEv+nv7jYHO6j9ZcAq4kIBCLRqddAkvy/i
SpeUNzUIqnFlT6PAs4DKJmPb7RR7Po8qRIksYp2MQQrhMwGvzraGvCeixPeTJumj
vWS4tdIQW/SzgUvo9Wn+t4hQm3REfsj7f3MBfaRaXsrir+1jpK0CGa2H178cakgu
Sr7C1D+A9ue4Yw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:56 2025 by rpki-client